OchreLegal
Privacy Policy
What stays on your phone, and the little that does not
Your map stays on your phone
Your countries, photos, notes, trip plans and location history are stored on this device. There is no advertising, no analytics and no third-party tracking in this app.
If you create an account
An account is optional. It holds your @username, a password (stored only as a one-way hash) and, if you use sync, a copy of your map so a new phone can have it. You can delete the account and everything on it from Settings → Danger zone → Delete account, at any time, and it is gone from the server immediately.
Friends
Friends find each other by @username. A friend sees your @username and display name, and — only if you leave "Share the country I'm in" on — the country you are currently in, as a country and nothing finer, for up to a week; and — only if you leave "Share my counts" on — how many countries and cities you have been to, as two numbers and never which ones. You choose who can add you and whether you appear in search, and you can block or report anyone. Reports are reviewed within 24 hours.
Invites
An invite link carries a random code that names who sent it, so the two of you can be made friends when it is accepted. Nothing else about either of you is in the link.
Community ratings
Ratings you give for food, safety and hospitality are sent with the country and the score only, tied to a random id that is not you — never your account, coordinates, photos or notes — so everyone's averages can be shown.
Location
With auto check-in on, Ochre reads your position in the background to notice when you cross a border. It is turned into a country on the device and the position is discarded; it is never sent anywhere. Only the country is shared, and only with friends, and only if you allow it.
Public data the app fetches
Weather, exchange rates, earthquake feeds and some photographs are fetched from public services. These requests carry nothing about you; the services see an IP address, as any website would.
Photos
Photos and videos you keep as memories are copied into Ochre's own storage on this phone. They are never uploaded, scanned or shared.
Deleting
Settings → Danger zone → Delete My Data clears everything on this phone. Delete account removes everything on the server. Deleting the app clears the phone too. Neither can reach a backup file you saved somewhere else.
Children
Ochre is not directed at children under 13 and does not knowingly hold an account for one.
Changes
If what Ochre sends ever changes, this page changes before that ships, not after.
This is the same text the app shows in Settings.